SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. SAP ERP has a security vulnerability that allows an attacker to register calls to certain functions that would otherwise be restricted to specific users. These functions are usually exposed over the network, and once...

VulnCheck KEV: CVE-2021-20090

Arcadyan Buffalo firmware contains a path traversal vulnerability that could allow unauthenticated, remote attackers to bypass authentication and access sensitive information. This vulnerability affects multiple routers across several different vendors...

EVlink City, EVlink Parking, EVlink Smart Wallbox code issue vulnerability

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric France. EVlink City, EVlink Parking, and EVlink Smart Wallbox are vulnerable to a code issue that The vulnerability stems from the fact that when carefully crafted...

Icinga 安全漏洞

Icinga is a scalable server, network resource monitoring system from Icinga, Germany. A security vulnerability exists in Icinga that originates from the fact that an attacker who obtains credentials can impersonate Icinga to access these services and add, modify, and delete information there. The...

Vulnerabilities fixed in Synology DiskStation Manager

Vulnerabilities have been fixed in Synology DiskStation Manager. An authenticated malicious person can exploit the vulnerabilities to obtain sensitive information and system data, as well as to execute arbitrary code under the privileges of the user. Synology has released updates to fix the...

Oracle ZFS Storage Appliance 安全漏洞

Oracle ZFS Storage Appliance is a storage appliance from Oracle Corporation of America that supports flash memory, petabytes of file storage and has a built-in Oracle database. A security vulnerability in Oracle ZFS Storage Appliance Kit Installation 8.8 allows an advanced privileged attacker to...

Oracle ZFS Storage Appliance 安全漏洞

Oracle ZFS Storage Appliance is a storage appliance from Oracle Corporation of America that supports flash memory, petabytes of file storage and has a built-in Oracle database. A security vulnerability exists in Oracle ZFS Storage Appliance Kit Core 8.8 that could allow a low-privileged attacker ...

The vulnerability of GE Healthcare’s medical diagnostic equipment lies in the lack of protection for operational data. This allows unauthorized individuals to gain access to protected information or enhance their privileges.

The vulnerability of GE Healthcare’s medical diagnostic equipment is related to the lack of protection for operational data. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information or enhance their privileges...

The vulnerability of the Python Requests HTTP request library relates to the lack of a mechanism for storing registration data, allowing attackers to access confidential information.

The vulnerability of the Python Requests HTTP request library is related to the lack of a mechanism for storing registration data. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the WebRTC technology implementation in Google Chrome browsers allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the WebRTC technology implemented in the Google Chrome web browser is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

CVE-2020-26832

SAP AS ABAP SAP Landscape Transformation, versions - 20111620, 20111640, 20111700, 20111710, 20111730, 20111731, 20111752, 2020 and SAP S4 HANA SAP Landscape Transformation, versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should b...

Vulnerabilities fixed in Trend Micro Antivirus for Mac

Trend Micro has fixed vulnerabilities in Antivirus for Mac. The vulnerabilities allow a locally authenticated malicious agent to able to cause a denial-of-service or to obtain system data obtain. Trend Micro categorizes these vulnerabilities according to the CVSSv3 method with a highest score of...

CVE-2020-14782

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

UBUNTU-CVE-2020-14796

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

U.S. Dept Of Defense: {███} It is posible download all information and files via S3 Bucket Misconfiguration

Summary: Hi team! I´ve found a misconfiguration S3 Bucket: Name Bucket = ██████████ I found this vulnerability after digging deep into the js files: ████████ Description: Apparently wanting to enter the docs folder is impossible, since it is protected or disabled so that anyone can access the...

The vulnerability of NSS libraries, related to deficiencies in the cryptographic algorithms used, allows attackers to gain access to confidential data.

The vulnerability of NSS libraries is related to deficiencies in the cryptographic algorithms used. Exploiting this vulnerability allows an attacker to gain access to confidential data...

Cross site scripting

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...

The vulnerability of the Windows Media Foundation component of the Windows operating system allows attackers to gain privileges to install programs, view, modify, or delete data, as well as create new user accounts with full user rights.

The vulnerability of the Windows Media Foundation component in the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain privileges to install programs, view, modify, or delete data, and create...

SQL Injection Vulnerability in the Website Building System of Beijing Turnaround Culture Development Co.

Beijing Turning Culture Development Co., Ltd. is the organization of various cultural and artistic exchanges, hosting exhibitions, books and magazines selection and editing, publishing agency, art design, painting and calligraphy framing exhibitions and displays exhibitions and sales, photography...